SAP security note 1508475, "Potential directory traversals in RKEVEXT0". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Potential directory traversals in program RKEVEXT0.
Solution
Please refer to Note 1497003 for additional information and instructions. The corrections from Note 1497003 are a prerequisite for the implementation of this note.
Logical file names used in this solution: COPA_EDT_INPUT (input file name), COPA_EDT_ERROR (error file name). Logical file paths used: COPA_EDT_INPUT, COPA_EDT_ERROR.
In releases ≤ 45B, the transaction codes for RKEVEXT0 were KE1X and KE4X. In releases > 45B, the transaction codes are KE1XO and KE4XO.
Reason and prerequisites
The programs contained in the correction instructions have vulnerabilities that allow a malicious user to potentially read arbitrary files on the remote server, which could lead to the disclosure of confidential information. Some programs in the correction instructions have vulnerabilities that enable a malicious user to potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
CVSS
Score 0
References
- Note 19015 – Termination during external data transfer
- Note 1497003 – Potential directory traversals in applications
Affected components
- SAP_APPL 31I to 605
- SAP_BASIS 46B to 710
Full note on SAP: SAP Support Launchpad note 1508475
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].